Hi, > On 8 Jun 2017, at 8:43 am, Eric <[email protected]> wrote: > > I just can't figure out where I'm going wrong unless it is a problem with the > way certs are deliver (Venafi) to me.......but they work on the WebUI with no > issues....so it's just the osa/jabber config.
I’d offer to try and reproduce it, but obviously it involves the private key for your SSL certificate, so that can’t be shared. My only guess (and it’s a wild one, I admit) is that the certificates are not being combined or provided correctly. It may be a Root CA issue, i.e. your browser trusts the certificate chain (which is why the UI works) but for some reason the certificate chain used by osa-dispatcher doesn’t include that Root CA chain. This is the reason why my blog outlines how to find the Root CA chain for the Let’s Encrypt certificates to include those into the certificates used by Spacewalk, because the chain isn’t complete in the global ca-certificates package used on Oracle Linux 7. So, my advice is to find the Root CA chain for your Venafi-provided certificates and create a full chain certificate as outlined in my Let’s Encrypt blog to see if that works. Cheers, Avi -- Oracle <http://www.oracle.com> Avi Miller | Product Management Director | +61 (3) 8616 3496 Oracle Linux and Virtualization 417 St Kilda Road, Melbourne, Victoria 3004 Australia _______________________________________________ Spacewalk-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/spacewalk-list
